Disallow use of default session secret for staging, production, etc.
Only require external services when we need to run the app.

There's a few Rails tasks (e.g. database migration, asset
precompilation) that load the application environment but don't run the
app server.  External services are usually not required for such tasks.